You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Now don't get me wrong here. I like Emsisoft and how it operates. But lately I've been playing my usual games from Steam and from some of my online games like Mortal Online and Elsword, when Emsisoft suddenly steps in saying they're giving off suspicious behaviour.

This has gotten my interest piqued as to why Emsisoft would react to my games like this, especially my Steam games. I recently got Planetside 2 and during play Emsisoft came up with 2-3 reactions.

Is this to be expected of Emsisoft? or would this be a cause for concern?

An illusion is as real as the person who sees it, but wouldn't that be an illusion in and of itself?

BC AdBot (Login to Remove)

Hi IllusionEclipse,If these games are official Steam games then I'd tend to say that these are false-positives. Any change you can upload the flagged file(s) to http://www.virustotal.com and post a link to the scan results here? I can then have a closer look at this.

regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."

Also, do you have your settings on the behaviour blocker set to Active Paranoid Mode? The behaviour block does occasionally flag on legit programs (such as AdwCleaner), you can always set up your own rules for Emsisoft to allow these "suspicious" behaviours on a certain file so it will not flag up.

(Crypt of the Necrodancer uses a external website from within the game to process mp3 files to an adequate beat for the game to use. The said website is as follows: "https://essentia.epf.edu". However, the site appears to be nonexistant).

An illusion is as real as the person who sees it, but wouldn't that be an illusion in and of itself?

Thank you for the additional information. I can confirm that all these files are perfectly harmless. They are also not digitally signed, which is likely the cause of the alerts.

I modified this in Emsisoft's anti-malware network, meaning that from now on it will automatically trust these files and not show an alert. Please note that it may take a few hours before this change takes effect.

regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."

I am using Emsisoft AV as a trial use, their support folk do not seem that friendly. I just noticed too, that Win 7 reads this as an anti virus program, so things are slowed down, Om my control panel it says I am running 2 anti virus programs. And Emsisoft has a anti virus program too, I do not run it on paranoid mode yet it is always picking up stuff, And it will not quarantine all of stuff picked up on real time, leaves it in it's log box. I can run a Norton NIS scan and pick up all of this stuff. Lots of complaints in emsisoft forums about it not working as good as It used to, if you need help, they tell you to do adware and something else and get back to the forum for help. They tell you not to e-mail support ,but to use their forums if you have problems,which more and more people are. I don't know what I'm going to do, don't like the slowdown because it is read as an anti virus. I was going to get rid of Norton to save money, but sometimes you get what you pay for. Any Ideas?

Sorry to hear about your bad experience with Emsisoft. EAM is a full antivirus, which is also why it is recognized as such by the Action Center. Personally I find that EAM slows a system down a lot less than Norton products, but more importantly, independent tests show its detections are quite a lot better.

However, an AV is a personal choice, for which reason it is good there are trial versions for almost each security program.

They tell you not to e-mail support ,but to use their forums if you have problems,which more and more people are.

Malware really is a very generic term. It means anything that does anything malicious to your computer or personal data. Antivirus is a more traditional name, back when Windows was first targeted, this was often by means of a traditional computer virus (a virus is a piece of malware that adds code to an existing file). The first programs that protected a computer against this type of malware where therefore called "antivirus".

Today "antivirus" is just a name given to a program that protects against a large range of threats, just like an antimalware program does. What defines an antivirus as "complete" solution is really more technical (the ability to monitor all running processes, the ability to access them if they need to be stopped or removed, and so on).

Can I just let my program files back into my computer?

Not sure what you mean by this.

regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."

I'm sorry if I'm a bit late to this discussion (I don't normally monitor BleepingComputer for topics about Emsisoft products), however there is a way to prevent everything in the Steam folder from being monitored by Emsisoft Anti-Malware's protection. Here's what to do:

Open Emsisoft Anti-Malware from the icon on the desktop.

Click Protection.

Select File Guard in the menu at the top.

On the right side, roughly in the middle, click on the Manage whitelist button.

In the box under Type click the little down arrow and select Folder (you may need to click in the box for the arrow appear).

Click in the gray box below Item to make a button with three dots (...) appear, and then click the ... button.

Navigate to the directory you wish to exclude, select it, and click OK at the bottom to add it.

Click the OK button at the bottom when done, and close Emsisoft Anti-Malware.

For those who don't know, Steam can use the following folders on 32-bit editions of Windows:

Please note that folder exclusions do not prevent the Behavior Blocker from creating hooks to processes that are running out of those folders, however it will cause the Behavior Blocker to ignore those processes rather than monitoring them. If you have issues that the folders exclusions don't fix, then you can add Process exclusions for individual executables as well to prevent the Behavior Blocker from creating hooks to those processes.

I'll try to keep an eye on this topic for any replies, but please note that I don't receive e-mail notifications from BleepingComputer for some reason, so I might not reply right away.

For we wrestle not against flesh and blood, but against principalities, against powers, and against the worldly governors, the princes of the darkness of this world...